{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,5,30]],"date-time":"2025-05-30T23:40:01Z","timestamp":1748648401656,"version":"3.41.0"},"publisher-location":"Cham","reference-count":30,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319255262"},{"type":"electronic","value":"9783319255279"}],"license":[{"start":{"date-parts":[[2015,1,1]],"date-time":"2015-01-01T00:00:00Z","timestamp":1420070400000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2015]]},"DOI":"10.1007\/978-3-319-25527-9_20","type":"book-chapter","created":{"date-parts":[[2015,10,7]],"date-time":"2015-10-07T11:08:43Z","timestamp":1444216123000},"page":"304-318","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["There are Two Sides to Every Question"],"prefix":"10.1007","author":[{"given":"Fabio","family":"Martinelli","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ilaria","family":"Matteucci","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Francesco","family":"Santini","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2015,11,20]]},"reference":[{"key":"20_CR1","doi-asserted-by":"crossref","unstructured":"Andersen, H.R.: Partial model checking. In: LICS 1995, p. 398. IEEE Computer Society (1995)","DOI":"10.1109\/LICS.1995.523274"},{"issue":"3","key":"20_CR2","doi-asserted-by":"publisher","first-page":"710","DOI":"10.1017\/S096012951200093X","volume":"25","author":"M Bartoletti","year":"2015","unstructured":"Bartoletti, M., Degano, P., Ferrari, G.L., Zunino, R.: Model checking usage policies. Math. Struct. Comput. Sci. 25(3), 710\u2013763 (2015)","journal-title":"Math. Struct. Comput. Sci."},{"key":"20_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"309","DOI":"10.1007\/978-3-642-28641-4_17","volume-title":"Principles of Security and Trust","author":"F Klaedtke","year":"2012","unstructured":"Klaedtke, F., Z\u0103linescu, E., Jug\u00e9, V., Basin, D.: Enforceable security policies revisited. In: Degano, P., Guttman, J.D. (eds.) Principles of Security and Trust. LNCS, vol. 7215, pp. 309\u2013328. Springer, Heidelberg (2012)"},{"key":"20_CR4","doi-asserted-by":"crossref","unstructured":"Bauer, L., Ligatti, J., Walker, D.: Edit automata: enforcement mechanisms for run-time security policies. Int. J. Inf. Secur. 4(1\u20132), 2\u201316 (2005)","DOI":"10.1007\/s10207-004-0046-8"},{"key":"20_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"73","DOI":"10.1007\/978-3-642-19125-1_6","volume-title":"Engineering Secure Software and Systems","author":"N Bielova","year":"2011","unstructured":"Bielova, N., Massacci, F.: Predictability of enforcement. In: Erlingsson, \u00da., Zannone, N., Wieringa, R. (eds.) ESSoS 2011. LNCS, vol. 6542, pp. 73\u201386. Springer, Heidelberg (2011)"},{"issue":"2","key":"20_CR6","doi-asserted-by":"publisher","first-page":"201","DOI":"10.1145\/256303.256306","volume":"44","author":"S Bistarelli","year":"1997","unstructured":"Bistarelli, S., Montanari, U., Rossi, F.: Semiring-based constraint satisfaction and optimization. J. ACM 44(2), 201\u2013236 (1997)","journal-title":"J. ACM"},{"key":"20_CR7","doi-asserted-by":"publisher","first-page":"65","DOI":"10.1016\/j.entcs.2004.10.008","volume":"121","author":"C Bodei","year":"2005","unstructured":"Bodei, C., Curti, M., Degano, P., Priami, C.: A quantitative study of two attacks. Electr. Notes Theor. Comput. Sci. 121, 65\u201385 (2005)","journal-title":"Electr. Notes Theor. Comput. Sci."},{"key":"20_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"246","DOI":"10.1007\/978-3-540-89173-4_21","volume-title":"Critical Information Infrastructures Security","author":"M McQueen","year":"2008","unstructured":"McQueen, M., Boyer, W.: Ideal based cyber security technical metrics for control systems. In: H\u00e4mmerli, B.M., Lopez, J. (eds.) CRITIS 2007. LNCS, vol. 5141, pp. 246\u2013260. Springer, Heidelberg (2008)"},{"key":"20_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"184","DOI":"10.1007\/3-540-44804-7_12","volume-title":"Process Algebra and Probabilistic Methods. Performance Modelling and Verification","author":"P Buchholz","year":"2001","unstructured":"Buchholz, P., Kemper, P.: Quantifying the dynamic behavior of process algebras. In: Gilmore, S., de Luca, L. (eds.) PROBMIV 2001, PAPM-PROBMIV 2001, and PAPM 2001. LNCS, vol. 2165, p. 184. Springer, Heidelberg (2001)"},{"key":"20_CR10","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"33","DOI":"10.1007\/978-3-642-38004-4_3","volume-title":"Security and Trust Management","author":"G Caravagna","year":"2013","unstructured":"Caravagna, G., Costa, G., Pardini, G.: Lazy security controllers. In: Samarati, P., Petrocchi, M., J\u00f8sang, A. (eds.) STM 2012. LNCS, vol. 7783, pp. 33\u201348. Springer, Heidelberg (2013)"},{"key":"20_CR11","doi-asserted-by":"crossref","unstructured":"Cheng, P.C., Rohatgi, P., Keser, C., Karger, P.A., Wagner, G.M., Reninger, A.S.: Fuzzy multi-level security: an experiment on quantified risk-adaptive access control. In: Proceedings of the 2007 IEEE S&P, pp. 222\u2013230. IEEE Computer Society (2007)","DOI":"10.1109\/SP.2007.21"},{"key":"20_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"178","DOI":"10.1007\/978-3-319-05302-8_11","volume-title":"Foundations and Practice of Security","author":"V Ciancia","year":"2014","unstructured":"Ciancia, V., Martinelli, F., Ilaria, M., Morisset, C.: Quantitative evaluation of enforcement strategies (position paper). In: Danger, J.-L., Debbabi, M., Marion, J.-Y., Garcia-Alfaro, J., Heywood, N.Z. (eds.) FPS 2013. LNCS, vol. 8352, pp. 178\u2013186. Springer, Heidelberg (2014)"},{"key":"20_CR13","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"23","DOI":"10.1007\/978-3-642-23178-0_3","volume-title":"Parallel Computing Technologies","author":"P Degano","year":"2011","unstructured":"Degano, P., Mezzetti, G., Ferrari, G.-L.: On quantitative security policies. In: Malyshkin, V. (ed.) PaCT 2011. LNCS, vol. 6873, pp. 23\u201339. Springer, Heidelberg (2011)"},{"key":"20_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-3-642-38004-4_1","volume-title":"Security and Trust Management","author":"P Dr\u00e1bik","year":"2013","unstructured":"Dr\u00e1bik, P., Martinelli, F., Morisset, C.: Cost-aware runtime enforcement of security policies. In: J\u00f8sang, A., Samarati, P., Petrocchi, M. (eds.) STM 2012. LNCS, vol. 7783, pp. 1\u201316. Springer, Heidelberg (2013)"},{"key":"20_CR15","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"306","DOI":"10.1007\/978-3-642-33383-5_19","volume-title":"Information Security","author":"P Dr\u00e1bik","year":"2012","unstructured":"Dr\u00e1bik, P., Martinelli, F., Morisset, C.: A quantitative approach for inexact enforcement of security policies. In: Freiling, F.C., Gollmann, D. (eds.) ISC 2012. LNCS, vol. 7483, pp. 306\u2013321. Springer, Heidelberg (2012)"},{"key":"20_CR16","unstructured":"Easwaran, A., Kannan, S., Lee, I.: Optimal control of software ensuring safety and functionality. Tech. Rep. MS-CIS-05-20, University of Pennsylvania (2005)"},{"key":"20_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"148","DOI":"10.1007\/978-3-642-29420-4_10","volume-title":"Formal Aspects of Security and Trust","author":"R Gay","year":"2012","unstructured":"Gay, R., Mantel, H., Sprick, B.: Service automata. In: Barthe, G., Datta, A., Etalle, S. (eds.) FAST 2011. LNCS, vol. 7140, pp. 148\u2013163. Springer, Heidelberg (2012)"},{"issue":"1","key":"20_CR18","doi-asserted-by":"publisher","first-page":"27","DOI":"10.1016\/j.cosrev.2012.01.001","volume":"6","author":"R Khoury","year":"2012","unstructured":"Khoury, R., Tawbi, N.: Which security policies are enforceable by runtime monitors? a survey. Computer Science Review 6(1), 27\u201345 (2012)","journal-title":"Computer Science Review"},{"issue":"11","key":"20_CR19","first-page":"135","volume":"2","author":"B K\u00f6pf","year":"2013","unstructured":"K\u00f6pf, B., Malacaria, P., Palamidessi, C.: Quantitative security analysis (Dagstuhl seminar 12481). Dagstuhl Reports 2(11), 135\u2013154 (2013)","journal-title":"Dagstuhl Reports"},{"issue":"6","key":"20_CR20","doi-asserted-by":"publisher","first-page":"761","DOI":"10.1093\/logcom\/1.6.761","volume":"1","author":"KG Larsen","year":"1991","unstructured":"Larsen, K.G., Xinxin, L.: Compositionality through an operational semantics of contexts. J. Logic Comput. 1(6), 761\u2013795 (1991)","journal-title":"J. Logic Comput."},{"issue":"1","key":"20_CR21","doi-asserted-by":"publisher","first-page":"135","DOI":"10.1016\/j.tcs.2005.08.006","volume":"346","author":"A Lluch-Lafuente","year":"2005","unstructured":"Lluch-Lafuente, A., Montanari, U.: Quantitative mu-calculus and CTL defined over constraint semirings. TCS 346(1), 135\u2013160 (2005)","journal-title":"TCS"},{"issue":"1","key":"20_CR22","doi-asserted-by":"publisher","first-page":"1057","DOI":"10.1016\/S0304-3975(02)00596-0","volume":"290","author":"F Martinelli","year":"2003","unstructured":"Martinelli, F.: Analysis of security protocols as open systems. TCS 290(1), 1057\u20131106 (2003)","journal-title":"TCS"},{"key":"20_CR23","first-page":"31","volume":"179","author":"F Martinelli","year":"2007","unstructured":"Martinelli, F., Matteucci, I.: Through modeling to synthesis of security automata. ENTCS 179, 31\u201346 (2007)","journal-title":"ENTCS"},{"key":"20_CR24","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"22","DOI":"10.1007\/978-3-642-33704-8_3","volume-title":"Computer Network Security","author":"F Martinelli","year":"2012","unstructured":"Martinelli, F., Matteucci, I., Morisset, C.: From qualitative to quantitative enforcement of security policy. In: Kotenko, I., Skormin, V. (eds.) MMM-ACNS 2012. LNCS, vol. 7531, pp. 22\u201335. Springer, Heidelberg (2012)"},{"key":"20_CR25","unstructured":"Martinelli, F., Matteucci, I., Santini, F.: Quantitative security on distributed systems. In: EPTCS (ed.) Proceedings of the 13th International Workshop on Quantitative Aspects of Programming Languages and Systems (QAPL 2015) (2015) (accepted for publication)"},{"key":"20_CR26","unstructured":"Martinelli, F., Matteucci, I.: Partial model checking, process algebra operators and satisfiability procedures for (automatically) enforcing security properties. Tech. rep, IIT-CNR (2005)"},{"key":"20_CR27","doi-asserted-by":"crossref","unstructured":"Martinelli, F., Morisset, C.: Quantitative access control with partially-observable markov decision processes. In: Proceedings of CODASPY 2012, pp. 169\u2013180. ACM (2012)","DOI":"10.1145\/2133601.2133623"},{"key":"20_CR28","doi-asserted-by":"crossref","unstructured":"Molloy, I., Dickens, L., Morisset, C., Cheng, P.C., Lobo, J., Russo, A.: Risk-based security decisions under uncertainty. In: Proceedings of the second ACM Conference on Data and Application Security and Privacy, CODASPY 2012, pp. 157\u2013168. ACM (2012)","DOI":"10.1145\/2133601.2133622"},{"issue":"1","key":"20_CR29","doi-asserted-by":"publisher","first-page":"30","DOI":"10.1145\/353323.353382","volume":"3","author":"FB Schneider","year":"2000","unstructured":"Schneider, F.B.: Enforceable security policies. ACM Trans. Inf. Syst. Secur. 3(1), 30\u201350 (2000)","journal-title":"ACM Trans. Inf. Syst. Secur."},{"key":"20_CR30","unstructured":"Zhang, L., Brodsky, A., Jajodia, S.: Toward Information Sharing: Benefit And Risk Access Control (BARAC). In: Proceedings of POLICY 2006, pp. 45\u201353 (2006)"}],"container-title":["Lecture Notes in Computer Science","Programming Languages with Applications to Biology and Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-25527-9_20","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,30]],"date-time":"2025-05-30T22:59:00Z","timestamp":1748645940000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-319-25527-9_20"}},"subtitle":["Controller Versus Attacker"],"short-title":[],"issued":{"date-parts":[[2015]]},"ISBN":["9783319255262","9783319255279"],"references-count":30,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-25527-9_20","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2015]]},"assertion":[{"value":"20 November 2015","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}